Skill UI

Trivy is an open-source, comprehensive scanner used to find vulnerabilities (CVEs), misconfigurations, secrets, and license issues across multiple targets. It is essential for implementing 'shift-left' security gates in CI/CD pipelines, scanning container images, Infrastructure-as-Code (IaC) like Terraform/Kubernetes, and generating/re-scanning SBOMs for supply chain transparency.

A specialized tool for generating sophisticated, strategic HTML presentations. It integrates data visualization using Chart.js, adheres to design tokens for consistency, ensures responsive layouts, and incorporates proven copywriting formulas and slide strategies, making your pitch decks highly impactful for marketing and business needs.

A comprehensive red-teaming skill for assessing the security posture of Retrieval-Augmented Generation (RAG) pipelines. It systematically probes two critical injection surfaces: poisoned retrieved context (indirect prompt injection) and embedding manipulation. Use this skill to validate retrieval guardrails, ensure data leak prevention, and demonstrate vulnerabilities in LLM-powered knowledge assistants.

This skill provides a comprehensive workflow for verifying the integrity of a system's boot chain using Trusted Platform Module (TPM 2.0). It covers local validation (event log replay against PCRs) and remote attestation (generating signed, nonce-bound quotes). Use this to detect bootkits, unauthorized firmware changes, or establish device posture for Zero Trust architectures.

Workthreads analyzes a team's coding history across multiple repositories to generate a structured weekly status report. It clusters raw logs into 'work threads' and automatically tags their lifecycle status (new, open loops, closed, reverted). This is essential for leads needing a high-level, actionable summary of project progress, outstanding tasks, and completed features without reading thousands of lines of raw activity.

This skill enables users to upload local images, such as screenshots or before-and-after comparisons, directly to GitHub using the GitHub CLI. It bypasses the lack of a public image upload API by mimicking the web UI's internal attachment flow, generating canonical `user-attachments` URLs. These URLs can then be seamlessly embedded into Pull Requests, Issues, or comments from the terminal.

This skill helps diagnose, repair, and prevent complex Drizzle Kit database migration conflicts. It addresses issues arising from merging branches, rebasing, or PR updates involving generated SQL, snapshots, and journals. Use it to ensure stable schema evolution in multi-developer teams and harden CI/CD workflows.

This comprehensive skill provides an index of official blueprints and implementation guides for building full-stack, AI-powered applications using Weaviate. It covers advanced patterns such as Retrieval-Augmented Generation (RAG), agentic workflows, data exploration, and multimodal document search, guiding users through best practices for setup, clients, and frontends.

This skill provides querying capabilities for the 1000 Genomes Project dataset, covering 3,202 whole-genome-sequenced individuals on the GRCh38 assembly. It allows users to identify variants within a region, find specific individuals who carry defined genetic variants, or determine the relatedness between two named individuals. Results include allele frequencies (AF), AlphaMissense scores, and various clinical annotations. Use this tool for advanced genomic cohort analysis.

This skill generates complete, production-grade client SDKs and API wrapper libraries for any REST API, regardless of the language (Python, TypeScript, etc.). It handles boilerplate code like authentication, retry logic (exponential backoff), data modeling, and structured resource management, saving significant development time. Use it whenever you need to consume a REST API via code.

This skill generates robust, production-grade Appium automation scripts for both Android and iOS. It supports multiple languages (Java, Python, JavaScript) and guides users through best practices for cross-platform testing, including proper locator strategies, explicit waiting, and complex gestures. Ideal for automating mobile QA processes on local emulators or cloud real device farms.

A systematic, non-mutating investigation designed for complex software failures, including bugs, regressions, crashes, and flaky behavior. This skill launches four specialized, read-only sub-agents in parallel to perform deep root-cause analysis, trace code paths, pinpoint the smallest failing seam, and predict the quickest path to confirming or fixing the issue. It is designed purely for diagnosis and hypothesis generation.